Bug 602502

Summary: If a fedora 13 system is converted to MLS, sedispatch generates an infinite stream of avcs
Product: [Fedora] Fedora Reporter: Joe Nall <joe>
Component: setroubleshootAssignee: Daniel Walsh <dwalsh>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 13CC: dwalsh, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-06-10 12:35:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
avc screenshot none

Description Joe Nall 2010-06-10 01:56:09 UTC
Created attachment 422744 [details]
avc screenshot

Description of problem:
If a fedora 13 system is converted to MLS, sedispatch generates an infinite stream of avcs

Version-Release number of selected component (if applicable):

setroubleshoot-server-2.2.86-1
selinux-policy-mls-3.7.19-23

How reproducible:

100%

Steps to Reproduce:
 su -
 yum install selinux-policy-mls
 yum erase setroubleshoot-server
 sed -i -e "s/targeted/mls/" /etc/selinux/config
 touch /.autorelabel
 chkconfig mcstrans on
 reboot
  
Actual results:

Se attached screenshot

Expected results:

No avcs

Additional info:

Comment 1 Daniel Walsh 2010-06-10 12:35:03 UTC
Joe you have to remove setroubleshoot if you are converting to mls.

It can not be supported, since it would be taking SystemHigh data and sending it to SystemLow procesess